CVE-2025-62730
Gravedad CVSS v4.0:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
20/11/2025
Última modificación:
20/11/2025
Descripción
*** Pendiente de traducción *** SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to modify permissions of users. However, they are able to assign administrative permissions to any user including themselves. This allow a malicious authenticated attacker with this role to escalate to admin privileges. This issue affects both Bulk Update functionality and regular edition of user&#39;s right and privileges.<br />
<br />
This issue was fixed in version 1.55.
Impacto
Puntuación base 4.0
8.70
Gravedad 4.0
ALTA